Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/MV0I419cbpokX_CqLvEdN7-M9Gw.roa
File: MV0I419cbpokX_CqLvEdN7-M9Gw.roa (raw, json)
Hash identifier: qFL2VOjH+wd3zvNwLX0VNNrzLiibiDSa732V2FthGPc=
Subject key identifier: 31:5D:08:E3:5F:5C:6E:9A:24:5F:F0:AA:2E:F1:1D:37:BF:8C:F4:6C
Certificate issuer: /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial: 01856EF435F2F1932D0DBA63F927DF53B6D3
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/MV0I419cbpokX_CqLvEdN7-M9Gw.roa
Signing time: Sun 01 Jan 2023 20:09:36 +0000
ROA not before: Sun 01 Jan 2023 20:09:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137
IP address blocks: 160.97.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:35:f2:f1:93:2d:0d:ba:63:f9:27:df:53:b6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Validity
Not Before: Jan 1 20:09:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=315d08e35f5c6e9a245ff0aa2ef11d37bf8cf46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:f3:41:8b:4d:17:6e:45:ef:67:bb:e3:2b:
0b:2f:90:16:38:00:a9:7c:48:59:4d:2f:01:80:a7:
07:76:b5:ca:48:b3:60:13:e0:cf:65:4e:01:fa:29:
2d:af:94:c0:a3:cc:e7:94:2a:57:4b:b7:66:29:e7:
dc:59:8f:37:e3:dc:8a:6d:cc:c4:02:65:cf:91:b5:
90:f2:95:25:68:1a:36:92:a5:c9:16:5f:60:95:ee:
1d:8a:3a:3c:25:05:3b:01:36:ab:7c:22:ad:3d:90:
99:8a:a6:23:a4:45:01:57:66:29:5c:d6:33:00:44:
f1:0b:2a:61:30:c5:f5:08:e3:0d:88:b2:e3:02:5c:
70:c1:c8:3b:9c:15:ee:21:18:2d:81:bf:ea:48:a3:
c9:21:6f:bc:4b:00:5b:db:01:16:f4:bb:4e:7f:c1:
1c:aa:9c:11:37:36:91:00:f5:be:0f:69:8a:3c:57:
5a:e8:fe:2c:92:e1:21:4d:42:2b:f6:b9:db:d6:4c:
42:18:18:d5:8e:ce:11:e7:bd:0f:73:ba:72:d7:63:
ec:72:ae:04:fc:4d:99:4f:d4:6f:15:8b:8a:7b:32:
21:a1:92:83:2d:22:d8:0e:8c:7d:ab:c0:2b:a8:d1:
8e:d0:bc:13:73:b2:d2:7d:f2:d6:27:54:2c:d6:24:
fb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5D:08:E3:5F:5C:6E:9A:24:5F:F0:AA:2E:F1:1D:37:BF:8C:F4:6C
X509v3 Authority Key Identifier:
keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/MV0I419cbpokX_CqLvEdN7-M9Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.97.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:7d:d9:bb:78:32:a8:9c:21:7e:83:fe:96:98:27:c3:83:56:
99:02:a5:d4:3e:49:67:fa:45:8e:35:b0:74:dc:0c:c4:51:24:
da:b6:45:b8:f1:e0:ce:1f:30:8f:70:2d:f6:67:9d:36:70:cf:
82:48:fb:25:75:e1:d3:a4:bc:78:5d:a7:3f:c0:9c:e1:3c:c0:
a1:f6:7d:21:9d:20:f5:b0:11:d2:aa:63:34:d7:ef:c0:e5:63:
02:e0:8d:e1:86:68:88:f4:62:f9:66:54:e2:dd:8a:3c:eb:5a:
fa:b9:5e:dd:b2:5a:da:5e:dd:6f:68:ac:7e:99:89:2f:a1:d6:
9e:63:5a:03:48:eb:7b:98:ac:5d:8d:b2:5f:e9:f6:70:50:74:
4e:11:25:ef:99:39:dd:e4:5c:ec:bb:c2:b6:17:59:39:5b:7e:
dd:02:98:f8:25:9a:8a:d5:84:f1:94:05:4f:79:d9:e8:65:44:
26:06:9c:cc:39:e9:fe:32:68:b4:e7:02:7a:d1:46:65:57:88:
3a:ea:d2:87:7b:17:6c:c6:f4:bb:cf:62:c1:26:d1:f3:6d:58:
b4:7a:fc:e8:af:35:2c:71:49:46:c3:b7:a1:e0:92:13:9a:6a:
a9:61:14:b4:89:2a:7b:7d:84:f7:f7:be:bb:45:fc:3e:d9:88:
83:d0:44:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:49 2025 by rpki-client